alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET DELETED Metacafe.com family filter off"; flow:established,to_server; content:"POST"; http_method; content:"Host|3a| www.metacafe.com"; http_header; content:"submit=Continue+-+I%27m+over+18"; classtype:policy-violation; sid:2006367; rev:7; metadata:created_at 2010_07_30, signature_severity Unknown, updated_at 2019_07_26;)